A division by zero vulnerability in the Linux kernel AMDGPU driver allows a local, authenticated attacker to trigger a system-wide denial of service.

This flaw exists within the drm/amdgpu driver where invalid UVD dimensions (width or height less than 16) cause a division by zero error during buffer calculations. An attacker with local access and low privileges can trigger this condition by providing malformed video dimensions to the driver.

The primary risk associated with this vulnerability is a denial of service, which can cause system instability or a complete kernel panic. Given the CVSS score of 7.8, this is considered a high-severity issue, as it allows local users to disrupt critical services or crash production systems. While the vector requires local access, the impact on availability in multi-user or shared hosting environments is significant.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.148, or later, depending on your specific branch.

Proactive Monitoring: Monitor system logs for kernel oops or crash reports specifically originating from the amdgpu module to identify attempted exploitation.

Compensating Controls: Restrict access to the drm/amdgpu device files for unprivileged users if hardware acceleration is not required for standard operations.

Public Exploit Available: Unknown

This vulnerability represents a significant stability risk for systems utilizing AMD graphics hardware. Administrators should prioritize patching the kernel to the versions specified above to prevent potential denial of service attacks. If immediate patching is not feasible, restrict local access to the graphics hardware interface as a temporary mitigation measure.